Paper 2025/591

ColliderVM: Stateful Computation on Bitcoin without Fraud Proofs

Victor I. Kolobov, StarkWare
Avihu M. Levy, StarkWare
Moni Naor, Weizmann Institute of Science
Abstract

Bitcoin script cannot easily access and store state information onchain without an upgrade such as BIP-347 (OP_CAT); this makes performing general (stateful) computation on Bitcoin impossible to do directly. Despite this limitation, several approaches have been proposed to bypass it, with BitVM being the closest to production. BitVM enables fraud-proof-based computation on Bitcoin, relying on a 1-out-of-n honesty assumption. This left the question of whether it is possible to achieve computation under the same honesty assumption without requiring onlookers to ensure validity through fraud proofs. In this note, we answer this question affirmatively by introducing ColliderVM, a new approach for performing computation on Bitcoin today. Crucially, this approach eliminates some capital inefficiency concerns stemming from reliance on fraud proofs. For our construction, a key point is to replace the Lamport or Winternitz signature-based storage component in contemporary protocols with a hash collision-based commitment. Our techniques are inspired by ColliderScript, but are more efficient, reducing the number of hash evaluations required by at least . With it, we estimate that the Bitcoin script length for STARK proof verification becomes nearly practical, allowing it to be used alongside other, pairing-based proof systems common today in applications.

Note: Minor revision

Metadata
Available format(s)
PDF
Category
Cryptographic protocols
Publication info
Preprint.
Keywords
BitcoincollisionscovenantsMerkle treeBitVM
Contact author(s)
victor k @ starkware co
avihu @ starkware co
moni naor @ weizmann ac il
History
2025-04-10: last of 2 revisions
2025-04-01: received
See all versions
Short URL
https://ia.cr/2025/591
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2025/591,
      author = {Victor I. Kolobov and Avihu M. Levy and Moni Naor},
      title = {{ColliderVM}: Stateful Computation on Bitcoin without Fraud Proofs},
      howpublished = {Cryptology {ePrint} Archive, Paper 2025/591},
      year = {2025},
      url = {https://eprint.iacr.org/2025/591}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.